Java

World Wide Web

Web development

Process (computing)

Computer security

Web application

Static program analysis

Operating system

Web service

Set (abstract data type)

Computer science

Code (set theory)

Web application security

Software

Secure coding

Source code

Information security

Software engineering

Programming language

Static analysis

Security service

Software development

Software security assurance

Priority in the development of Web applications is the implementation of security mechanisms. In order to detect potential security vulnerabilities and implement appropriate security mechanisms, it is necessary to perform a detailed analysis of the application. For the detection of potential failures in the process of applications development, the static analysis of source code is used. STASEC [1] is a tool for static analysis of source code of Web applications that are implemented using the Java programming language. This paper presents a proposal for expansion of this tool with new module for the automatic detection of application vulnerabilities caused by manipulation of the input data on the client.

Proposal for expansion of STASEC tool